DO
Product
dom-sanitizer
4
CVEs
0
On KEV
7.3
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch
Add dom-sanitizer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103687 | 7.3 | Oct 1 | rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +10 more |
| CVE-2026-100370 | 4.7 | Sep 28 | DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation Affected: < 1.0.15 |
| CVE-2026-40301 | 4.7 | Apr 17 | rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives Affected: < 1.0.10 |
| CVE-2026-103686 | 3.5 | Oct 1 | rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +10 more |
Showing 4